Repository navigation
codegen-orchestrator-1706: Wake PR CI after authenticated GitHub completion - #846
Merged
Merged
Conversation
POST /api/webhooks/github authenticates each delivery by its HMAC-SHA256 signature over the raw, bounded body and publishes one pr_ci hint for a completed workflow_run. The API requires GITHUB_WEBHOOK_SECRET; public routing and deploy wiring are separate activation steps.
Python's json decoder accepts these non-JSON constants by default; the receiver's single decoder now rejects them into the sanitized 400 path.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Candidate: branch pipeline/codegen-orchestrator-1706, commit a0957ad (tree 4b6d354f8bb2a5ef2c51cd3f6c81bb6cdb6d36fb), one commit on main 62b1655. Commit message has no AI trailer. Workspace clean after commit.
Why
Wake the existing PR/CI sweep when GitHub delivers an authenticated workflow completion to the API. Implement the receiver without exposing public ingress or activating a GitHub webhook. This is a mergeable d3 increment; the 30 s scheduler backstop stays authoritative recovery.
How verified
CI runs
Backend Docker-in-Docker Integration Tests,Build Service Image Candidates,Build Worker Base Image Candidates,CI Contract,Detect Changed Services,Fast Checks (Unit Tests),Lint (Ruff),Publish Service Image Release,Publish Worker Base Images,Required CI Gate,Service Image Entrypoint Importsona0957adf0281; the merge waits for them to pass.Card:
codegen-orchestrator-1706